refactoring oauth code. seems like application bearer token oauth isn't what I'm looking for. re-trying oauth 1.0 authentication