add support for request_visible_actions oauth parameter