fix user_t/s to token/secret, rm dead code from authenticate_url

fix a remaining errant instance of "user_token"/"user_secret" instead of "token"/"secret"
removed some dead code from authenticate_url.