half way--- add oauth-like Authentication for api use
fixing request_token bugs