First try code, then try status, since the two oauth gems store the response code differently
whitespace
handle empty result set, don't know if it ever happens in reality but the fraudpointer fork noticed it