More oAuth fiddling
securing a service url