Including oauth_callback into the auth header

as suggested in http://goo.gl/WOXgI
+ added missing semicolon.