fix script
allow authorization headers