no authorization header passed to api[ok]