OAuth header wasn't built correctly because the body changed afterwards, fixing #9