Move all functions to OAuth for simplicity

Remove application-only authentication, use OAuth with oauthheader
function