[aphrodite] Add Authorization to headers for CORS