[keycloak-user] Authorization header from third party site