fixed, allow OAuth TokenResponse returns duplicate key
ready for 0.8.2