OAuth key needs to be in a header instead