- renaming authSignature to o_auth_signature to be consistent with specs
- allow passing authKey and o_auth_signature in headers or body to make it easier for our clients