Rate-limit response headers for OAuth token creation (#310)

This change handles the rate-limit response headers
coming from the `POST /v1/oauth/token` endpoint, so that
the SDK can do retries properly.