Oauth headers for the API

I'm attempting to test token based auth with the foreman API and I'm just
not finding any good examples to help me along. My tests are just basic
curl commands to see what I can or cannot do. Maybe that's part of the
problem, but at this point I don't know what I don't know.

Can anyone provide an example of what headers are required and their
structure?

This command passing works

curl -k -u our_user -H "Content-Type:application/json" -H
"Accept:application/json" -X PUT http://foreman/api/v2/hosts/hostname
{"host": {"hostgroup_id": 3}}

So I attempted various versions of the below passing what I thought were
the necessary headers:

curl -k -H "Content-Type:application/json" -H "Accept:application/json" -H
"Authorization:token <what goes here; oauth_consumer_key?>" -H
"X-FOREMAN-USER:<our_user>" -X PUT http://foreman/api/v2/hosts/hostname
{"host": {"hostgroup_id": 3}}

curl -k -H "Content-Type:application/json" -H "Accept:application/json" -H
"Authorization:token <I tried the authenticity token here as well>" -H
"X-FOREMAN-USER:<our_user>" -X PUT http://foreman/api/v2/hosts/hostname
{"host": {"hostgroup_id": 3}}

Any help is appreciated.

–Wayne