I think at this point you choose either OAuth 1.0a or to roll your own. If it's not in your future to be a public API, I'd go with rolling your own if you are comfortable writing that kind of code.