Fix: include optional OAuth parameters in HMAC-SHA1 signature.