trying to be more explicit about authorization header syntax [ci skip]