PostRequestHandler uses Authorization header

Commits have been squashed for neatness,
Changes are reworking PostRequestHandler to work much more like GetRequestHandler and always do oauth via the Authorization header.
This is a step towards merging/eliminating XXXRequestHandlers and handling all http methods.