Fixed verify_request_token_request in OAuth1 server.
* it now calls verify_request with require_callback=True
* added docstring about oob callback
* added test demonstrating use case