fix oauth.send always POST