Move oauth tokens from http-header to soap headers, and allow for multiple tokens to be configured.
Still add the first token as a OAuth2 header for backwards compatibility