more work on twitter auth