Support overridden headers

Currently, HTTPGateway hard-codes the headers. For full support in Lively we need to be able to send custom headers.

### Acceptance Criteria
1. apiRequest() should accept additional headers as an argument
1. apiRequest() should be backwards compatible
I think it would be more clear to use `_.defaults` here.