fixed oauth signing