Handle unauthorized responses, retries and expired bearer in Authorizer

[PimCoumans]

Currently the Authorizer class only stores a bearer and adds it to a given request. It should be responsible for the actual authentication and could also handle the case of unauthorized responses and when the sent bearer is expired. The actual authentication part is currently done in the authorize() logic, which should be revised with most responsibility given to the Authorizer class