Square API doesn't Basic Auth header at token endpoint yet.

ref #2