Allow oauth params via the query string or form

See http://tools.ietf.org/html/rfc5849#section-3.5.2