send authorization header when requesting layout