Check authorization header before adding