The following function gives a validation error instead of the token:
failed to validate oAuth signature and token
I'll admit this isn't really an answer, but if you can, use the PECL OAuth package. Rasmus Lerdorf wrote a tutorial on how to use it and it got me around this same issue.