twitter auth is gnarly, and nobody documents this stuff??