use x-fproxy-authorization header