Fix for using HTTP header to specify client_id/client_secret/access_token in OAuth2 module.