Added the extra param: appsecret_proof to the oauth api calls