Fix authorization header append rule