draft example for payload authentication

this is only a draft of the payload authentication, it's based on 7.x although i believe there should be minimal differences to 8.x ?

Let me know and i'm happy to fix it.