You'll have to start debuging by comparing the signature base string determined by the gtm-oauth library with that used by the server. Most often, signature mismatches are due to differing base strings, so compare the base string generated in the library with an example from the server documentation.
The method +signatureForParams:request: in the library does the work of signing the request.