save others from wasted time

Unfortunately I gave this a whirl, and wasted a bit of time before tracking down the note on Twitter's API, and the discussion in the issue on oAuth.

Hopefully this note will save someone else the same trouble :)