Shouldn't we also check that `oauth_token_secret` is set to assume that we can make OAuth2 authenticated requests. I know there are some cases where users (mistakenly) forget to set their `oauth_token_secret`. For example, see Issue #390.