Build token object from token+secret to remove OAuth code from app