only symbolize recognized oauth header keys
spec non-symbolization of arbitrary unrecognized header attributes