Allow for 2-leg oauth where there is no token or token_secret