The token and secret are now stored in session