Add authorization headers