externalize twitter credentials