Angular Set Authorization Header Is Correct