Be better about consistent renaming of the authorization header