check for oauth headers