oauth: let type=2 use 'oob' as callback
twip: add another set of oauth tokens for GET requests