why are twitter.com domain references removed from security protocols