Send the default headers in OAuth as well

This makes it easier for Xero support staffs to look at issues with OAuth