Ok, got the email, so I can review the second half. Don't ask for my Twitter login / password. That's a terrible, terrible practice which trains people to get

Ok, got the email, so I can review the second half. Don't ask for my Twitter login / password. That's a terrible, terrible practice which trains people to get phished. You don't even use SSL, so the username and password is transmitted in the clear! At the very least, you should warn people about the dangers of giving a third party 100% access to their Twitter account and the dangers of transmitting their login credentials openly. This is true for any site -- let alone a project with 0 reputation. As it stands I have to say that your web app seems really irresponsible.