OAuth signature should be verified against URL provided to the tool. There is possibility that a proxy will change URL along the way (for example protocol from https to http) which would invalidate signature.
(cherry picked from commit 8494473a0592908b948e17a9204b91f36bb20c28)
