Add authorization header when credentials provided