[FEATURE] add authorization header to httpstep (#170)