password bug in twitter