Use oauth token and secret that are set in the session
Update README with test user credentials and specific version number for express