Changed

• Send authorization header with code flow instead ofclient_secret in the body
• Merge the global and passed inoptions over the local request options (allowing you to override things likegrant_type orresponse_type)
• Updated build and dependencies to use ES2015 language features (namelyObject.assign)