make callback optional to be able to download pdfs

If we dont provide a callback for `_performSecureRequest` it will return the raw unsent request object: https://github.com/ciaranj/node-oauth/blob/0.9.10/lib/oauth.js#L405-L410

This allows to override such things like the Accept header.

Also added an example to the README.