Moved authorization info to header