Oauth should always be done in the Authorization header
not in params for unsigned gets
Fix code and unit tests
Strengthened a test
Simply and extend the RequestBuilder tests
Consolidate what the Get and Post tests covered, use [TestCase] to test all the http verbs!
Merge pull request #135 from AnthonySteele/OathAlwaysInHeader

Oath always in the Authorization header