clarified oauth token as access (instead of request)
fixed parsing bug: oauth_request asks for an XML response
added friends