Handle Authorization headers in request and response