Desktop applications only support the oauth_callback value 'oob'/oauth/request_token