Reviewing @LubosRemplik's code and some other people's bugs, it looks like his fork contains a few fixes for OAuth. https://github.com/LubosRemplik/CakePHP-Api-Datasources