more debug
using header auth for request token call (fixes crash after recent Fitbit security update)