Desktop applications only support the oauth_callback value 'oob' /oauth/request_token