We have an app (id 1370730) that recently upgraded from read-only to read/write. Authentication works fine, redirecting users back to our website with omniauth-twitter and Ruby on Rails backend. The problem is if somebody has previously allowed read-only access and they try to login to our app, it requests read/write permissions with the standard dialogue but it doesn’t redirect to our app, it just stays on the request permissions dialogue page. If you look at the application permissions under the user’s settings they stay at read-only. Clicking “cancel” DOES redirect back to our website. If the user deletes the app under user settings and tries to login it seems to work just fine.