Added the authorization header back, as it meets the spec and shouldn't hurt anything.