fixed bug with authorization header