fixed authorization headers