Ok, got the email, so I can review the second half.<p>Don't ask for my Twitter login / password.  That's a terrible, terrible practice which trains people to get phished.  You don't even use SSL, so the username and password is transmitted in the clear!<p>At the very least, you should warn people about the dangers of giving a third party 100% access to their Twitter account and the dangers of transmitting their login credentials openly.  This is true for any site -- let alone a project with 0 reputation.  As it stands I have to say that your web app seems really irresponsible.