roundTrip shouldn't have been modifying the supplied request. Change to clone it first (thanks to the goauth2 package for the method)