apply custom header fields to token refresh request