Allow Authorization header on login and register