fix server

The biggest issue was the size of the session object you were trying to save. `hapi-auth-cookie` falls apart if your session is over about 1kb in size because of a race condition. The easiest solution is to whitelist the keys you actually want before setting the session, then everything else seems to work :)

Also, here's a screenshot of my twitter app's config

![twitter](https://cldup.com/q96JO49pX9.thumb.png)