Made sure all endpoints used the self._create_request() method and referred to request.resource_owner_key instead of request.oauth_token