[OAuth 2.0] Support adding origin/other headers in token request

The Microsoft Entra OAuth 2.0 flow for SPAs requires the token request includes an Origin header.

My organization does not grant me access to our Azure’s app registrations, so I do not have a way to work around this, short of forking the OAuth 2.0 plugin.