oauth-signature tagged releases