Fix authorization header