Check for Authorization header too