No need to default headers, rename option to customHeaders to match OAuth 2 strategy.
Test case for custom headers.