Fixed test to take into account CORS support for Authorization header