three rewrites later, i have my own oauth impl working on appengine with twitter, latitude and foursquare all authenticating.