extract auth header generation into CryptoUtitlity