Authorization header added to client and server as configurable option, README updated accordingly.