fix missing Authorization headers on Apache