Now using Server-Authorization header in hawk response

Closes #706