added extra headers for exchange_token, added redirect_uri when refreshing tokens