decode and add Authorization