Instead of checking for _baseSite, just appending authorization header for getOAuthAccessToken.