add the constructors for authorization header with and without payload validation.