making sure the oauth token is not HTTP only