fix(*.dothiv.org): pass authorization header