session support and working twitter auth callback