notes for Auth2 and Tweetful2