plugable header validation logic

Don’t require subclasses for special header validation. Now RESTling
alows multiple validation methods in parallel.