fix oath signing when using POST