add Bearer in Authorization key header