authorization added to header, authenticated get request working for querying users