Authorization header allowed to be an Option.