Fix readme headings

It doesn't make sense to have the **Custom HTTP headers** and
**request(options, callback)** sections *under* the **OAuth Signing**
section.