modify sign key when request has oauth_token_secret