Some moe work on the authorisation. These changes are actually more about hte authentication part. The 'message' object now has a 'issuer' field which should return the Certificate object representing the signer of the message. Please note, that this will most likely only work with JSON messages. Will tackle XML messages when design settles down.