Adding the ability to use Oauth if you supply the token consumer key and...

Since you were checking for the Oauth token and not the secret you weren't allowing the user to use their consumer key to use the api. This way they can use their consumer key or basic to consume the api.