bugfix in OAuth.get_token()