use oauth_token in the payload instead of the generic token