Fix bumping against twitter api rate limit

To reduce bumping against twitter api rate limit, friends and followers
are stored as a comma separated list in cookie variables
Twitter api only used when those variables aren't set and user tries to view
them
Comment out canvas & js
Update todo
Only show twitter F&F when auth'd via twitter
Use ENV for information that should be hidden
Tweet and see F&F if you're auth'd with and used twitter to sign in
Authentications viewable, creatable, destroyable from edit profile
Update todo