UPDATE:
In case anyone else runs into this issue (having to add oauth to image requests) it turned out to be a call to session_start() that was doing the blocking. Si