a check should be made cause if authz module is not set we don't need to append the header all the time