Fix the value of the uppercase `authorization` header is not obfuscated.