twitter frontend signs requests with an obfuscated script that is imported on demand, bleh