moved the logic to OAuthorizationHeaderWithCallbackAndVerifier and made OAuthorizationHeaderWithCallback just call OAuthorizationHeaderWithCallbackAndVerifier when an Authorization Header without a verifier is needed.