Use http headers instead of passing oauth_token in the body