apparently PATCH requests do not work with oauth 1.0a. using the alternative header suggested by Desk.com