Generalize api

[quidproquo]

The original decrypt method only returns the decrypted payload and makes it difficult to get to the header information without going through a bunch of hoops. Returning the payload and header from this method makes more sense since it's more generalized and allows for more flexibility.