changed the request matcher to match for oauth only when the request Accept: does NOT equal text/html