fixed break bug in authorization header