make the request work with Authentication Header