create a new rest-client request after setting the authorization header,
since the header attribute is read only access.