This is the change that makes the library agnostic to how you want to do OAuth.  We used to return requests_oauthlib.OAuth1, but making use of that requires you to use requests_oauthlib.request. by return the authorized resource owner's key/secret instead, we delegate the concern over which HTTP lib to use.