Add ability to override access token request headers (laravel#603)

* Add ability to override access token request headers

This moves the currently hardcoded `getAccessTokenResponse` into their own method.  This allows children providers to construct their own headers as needed.

A perfect example of the necessity of this feature is the newer Pinterest v5 API.  In order to exchange the code for an access token, they require an `Authorization` header composed of a base64 encoded `client_id` and `client_secret`.  Without this change, the Pinterest Provider would need to entirely reimplement the `getAccessTokenResponse` method.  **With** this change, the Pinterest Provider could simply:

```php
protected function getTokenHeaders()
{
    return array_merge(
        parent::getTokenHeaders(),
        [
            'Authorization' => 'Basic ' . base64_encode("{$this->clientId}:{$this->clientSecret}"),
        ]
    );
}
```

* formatting

Co-authored-by: Taylor Otwell <[email protected]>

Add correct encoding and the required state param. (laravel#599)

* Add correct encoding and the required state param.

* Set default state when stateless.

* Update TwitterProvider.php

Co-authored-by: Taylor Otwell <[email protected]>

Update SocialiteManager.php (laravel#596)

allow oauth version in config

Override abstract provider for Twitter's OAuth 2.0 provider (laravel#576

)

Create update-changelog.yml

Update CHANGELOG.md

Update CHANGELOG.md

Update CHANGELOG.md

Update CHANGELOG.md