Allow providing arbitrary headers to HalClient to send with every request

- Maintain existing accept: and content_type: options to
 HalClient#initialize
- Continue to not send Content-Type header with the GET requests.  Other
 known POST-only headers are not blacklisted however.