Use OAuth-compliant headers for access token
Drop Python 3.6 and 3.7 support