Only ask for read-only access by default.
Make sure we handle the case where there's no longer a record for that session.
Rename the provider & hid to just be twitter_uid, we're not planning on doing Facebook anytime soon. Also add an index on that column for faster lookups.