Added note on instatiation with access_token
signature check is now idempotent and signature check moved before oauth call
1.2.4