invalid authorization header: does not have format 'Bearer eyeg...'