Fixed two violations of the OAuth spec (section 9.1.1)

[wroluk]

Fixed two violations of the OAuth spec (section 9.1.1):

1. Take parameters from the request body only if content-type is 'application/x-www-form-urlencoded'
2. Use parameters that are in the URL query part for OAuth signature