Add Header support to the HttpAuthorizer

This will allow authorizers to pass http headers to the application for authorization.