[oauth] Fix signature for _new_token.