twitter oauth

all JS should be in a pulled out module.