don't send hashes in urls to oauth
Merge pull request #11 from sysrun/master

don't send hashes in urls to oauth