fixed bug with Authorization missing when redirecting