Add OAuth authentication
Don't send Accept header

It doesn't actually matter whether we send this, so let's simplify.
Skip HEAD requests
Show correct method
Parse query out correctly
Remove unused variables
Fetch authentication URLs dynamically