Allows custom headers in http requests

I changed the http request functions to allow an extra headers object before the final callback. I added a little hack in the _performSecureRequest() function to prevent this from breaking compatibility.