Add a GET method to OAuth, refactor to commonise code; rename OAuthSigning; add VerifyCredentials endpoint