Why do we have to remove Authorization from the header? Do we not still need to be authorized?