protect the default headers for when custom headers are removed

[uglyog]

The custom request headers blow the defaults away. This merge request uses _.defaults to allow the custom headers to override the defaults without replacing them. Without this fix, adding a custom Accept header and then removing it does not restore the original Accept header.

[mikekelly]

great, thanks