adding http header for authorization token