Use Authorization HTTP header