[core, security] Add authorisation header name constants