a simple token and signature creator for OAuth