Two additions to OAuth that will be very helpful: 1) When a user removes the application from their connections, Twitter should make a callback to my system so that I can delete the account from my DB.
2) There should be a call my system can make to remove the app from the user's connections, typically in the case where the user deletes his account from my system. As an aside, how many times have you misspelled oauth as ouath in your code?