Use Oauth headers for GET request

This is the work we did last week to enable Oauth request params to be passed in via the Authorization header for GET request. I thought it may be better to merge now and finish off the work for POST etc in a separate PR.