build: authorization header missing