json_decoding the response should be the responsibility of the application, not the OAuth lib