static authorization header implemented