Auth.prototype.httpRequest & frameRequest now support headers