removed Challenge from Authorization constructor; updated documentation