Reply to post:

'scuse me. We need a *groan* response that is neither thumbs up nor down but a nice big LART.

Damn, never having looked at the innards of OAuth, I'm surprised it uses tokens subject to replay attack in the first place.