properly set Authorization header on retrieving cached token; bump pod version