php curl set header authorization bearer