added support for authorization header