Fix headers

Fix: Authorization headers are now merged with custom headers instead of overwriting them. Improved header flexibility for authenticated requests.