It doesn’t look like you’re using the right oauth_token in this request. Twitter access tokens typically are preceded by the user’s ID integer and a dash – it’s like the oauth_token value you’re using here is actually a request token, which has no information about the user in the request.