Here you can read the protocol including what Authorization headers does it need. Even with the code you added it's still unclear how the OAuth object is built.
However, I don't recommend you to continue using the GData API as it's being deprecated. Consider using the JSON-based v3 version along with the new authentication method. The API specification and usage is also new, so you will need to invest some time.