update lock file
add Accept header to token request, partial fix for #22