Add authorization header instead of using the HttpClient challenge