assert on request token/secret