2015-07-15 UTC
# 
aaronpk b) before-hand, I make a POST request to your token endpoint with an authorization code that I generated, you check the code against *my authorization endpoint* and if it's valid, you generate an access token. then to actually fetch the post, I make a GET request with the access token that *you* generated in the Authorization header