fix oauth headers, and miss spellings