the only thing you're missing is the logs that would help me help you...check the sig, i can normally figure out what went wrong, if it was my app or twitter etc. but without the logs there is nothing i can do.