According to https://dev.twitter.com/docs/auth/implementing-sign-twitter “If the user is signed in on twitter.com and has already approved the calling application, they will be immediately authenticated and returned to the callback URL with a valid OAuth request token. The redirect to twitter.com is not obvious to the user.” However, I am forced to agree to permissions for the app every time I authenticate and not redirected. I can successfully use the API after each grant so I know the access token is properly received, and I even checked my app authorizations to confirm my app is listed. Why would I be required to permissions every time I authenticate instead of being redirected automatically?