pushed request token and authenticate logic into model.  Much cleaner app delegate.  Starting on retaining current user