added Security
refactored app config
modified startup, if missing twitter config...
added scoring, refactored ids to use userid not apitoken