Use auth_fitbit() method in handle_callback so that auth_fitbit actually has purpose
Start providing for a real OAuth callback URL

A hardcoded URL was set as the callback before, which is not so great. A dynamic URL will be good once this is actually a plugin.
Store oauth_token and oauth_secret as user meta data