Isn't this also needed for OAuth1?