Do not url decode the body data, just add it. See https://oauth.googlecode.com/svn/spec/ext/body_hash/1.0/oauth-bodyhash.html