added authorization as a valid auth header