allow passing oauth token and secret in constructor