[fix] request header when exchange authorization code for access token