Turns out, Twitch doesn't use full-OAuth