Just so you know, the key and secret should actually be saved to the provider.  That was the whole point of separating the User and Provider models.