finally got oauth working. Had a bug in OAuthToken::_build_signature() where I incorrectly left out GET and POST parameters in signature base string