Add the authorization header to the xhr request.