I'd prefer to standardize on "Authorization: token OAUTH-TOKEN"