Fix use after free in HTTP authorization code