Fix bug with Authorization header

It wasn't actually being added...