a hackaround for using oAuth for user related calls

paths such as “friendships/lookup” need oAuth token and currently
consumers only support Application-Only auth.
If using Guzzle as transport we can plonk guzzlehttp/oauth-subscriber
into it and it all gets nicely wrapped.
Just need to make sure that the bearer Authorization header is not set
in consumer.