Hi Will,
I'm not yet checking the install / uninstall callback's, it pains me to think they may be different. Care to double check and see if the OAuth tool sends the same signature as the server, when the same paramaters are used?
Also, want to confirm if you're appending "oauth_version=1.0" to your generated ...