Checking headers for OAuth2 testing