#424 playing with header for authorization