Client sending Authorizatoin header