OAuth implementation notes / PaPut