'Authorization' header is one from the 'special' headers that are advised not to be modified. This is from Apple's documentation (LINK):
The NSURLConnection class and NSURLSession classes are designed to handle various aspects >of the HTTP protocol for you. As a result, you should not modify the following headers:
- Authorization
- Connection
- Host
- WWW-Authenticate