Single sign-on ticket is returned when login with Authorization header