Delete Authorization header

Otherwise the following header will be sent
Authorization: null
Have you tested this? this "delete" method looks weird to me