Fix the OAuth HTTP header bug with mod_wsgi

1. Extract OAuth parameters from HTTP_AUTHORIZATION header if OAuth provider sits behind mod_wsgi
2. Add _check_nonce stub method. This way it's easier to implement OAuth provider logics