We don't really do mass-assignment, so remove the list of accessible fields.
Make sure we update the twitter username every time the user logs in, in case its changed since last time.
Make sure that we have the right twitter-related environment variables on startup, otherwise it all won't work :).
Ignore .env files since they hold environment variables that should stay secret.