fix authorization header not always set.