omniauth-twitter implemented, but w/o email & password validations on