Patch ajax request to include Authorization header