Added ability to send tokens via HTTP headers

This makes GET requests easier to manage and mimics the behavior of the
similar [passport-facebook-token](https://github.com/drudge/passport-facebook-to
ken) project.