add new header Authorization