BTW here is what I get. Even when I test a fresh app with the Oauth Test curl URL.
HTTP/1.1 401 Unauthorized
content-length: 27
content-type: text/plain
date: Thu, 08 May 2014 22:12:05 UTC
server: tfe
set-cookie: guest_id=v1%3A139958712535322924; Domain=.twitter.com; Path=/; Expires=Sat, 07-May-2016 22:12:05 UTC
strict-transport-security: max-age=631138519
x-tfe-logging-request-category: API