add authorization header to the post request to get a token