fixed headerer authorization header