set authorization-header when fetching credential from cache