Adds support for two-legged OAuth calls

I am trying to write a client for http://context.io, however they use two-legged OAuth 1.0, which means actively *not* sending the `oauth_token` parameter in the request.

The tests pass, and all of that good stuff.