fix oAuth2 signature regression