CORE-5558: updated the header to pass back to the OAuth callback servlet when an access token is obtained