support both OAuth 1 and 2