Fix headers for authorization