Fix token exchange authorization header id