At this stage, the backstage is using proxy with a hardcode authorization header, so we need to change that to use proper token.