Split AuthorizationManager into 2 classes: AuthorizationManager and AuthorizationSession.
Clean up includes of authorization headers