updates OAuth to use POST for authorize requests (occording to the spec)