Make sure HTTP headers are passed in OAuth requests
Access token is optional