Add external authorization via http request

[pingiun]

This is similar to Envoys external authorization, and can be used for example in combination with Ory Oathkeeper.

[wfaler]

👍 for this PR!

Maybe a future refinement would be to use service-discovery to discover the endpoint by service name? But I'd take this as is now to get the ball rolling, have the same use-case in mind.