RequestHeader unset Authorization