adds authorization to the list of allowed headers