diff --git a/bower.json b/bower.json
index 53f0564..64be67b 100644
--- a/bower.json
+++ b/bower.json
@@ -1,7 +1,7 @@
 {
   "name": "strolch-wc-auth",
   "description": "Strolch WebComponent Auth",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "authors": ["Robert von Burg"],
   "keywords": [
     "strolch",
diff --git a/strolch-wc-auth.html b/strolch-wc-auth.html
index 605a566..2f0d59a 100644
--- a/strolch-wc-auth.html
+++ b/strolch-wc-auth.html
@@ -582,6 +582,7 @@
                 this.dlgTitle = this.localize('resetFailed');
 
                 this.$.ajaxAuth.url = this.basePath + 'rest/strolch/privilege/users/' + this.username + '/password';
+                this.$.ajaxAuth.headers.authorization = this.authToken;
                 this.$.ajaxAuth.method = 'PUT';
                 this.$.ajaxAuth.body = {
                     password: btoa(unescape(encodeURIComponent(this.password1)))