Allow OAuth params via the query string or form

Allow the `oauth-params` function to gather OAuth parameters from the request parameters (as per http://tools.ietf.org/html/rfc5849#section-3.5.2) and not just the Authorization header.