use correct request method and improve oauth test