fixed authorization header in courses method