SECURITY: Ensure that user has been authenticated.

spec/controllers/users_controller_spec.rb

@@ -611,6 +611,8 @@ describe UsersController do
           auth = session[:authentication] = {}
           auth[:authenticator_name] = 'twitter'
           auth[:extra_data] = twitter_auth
+          auth[:email_valid] = true
+          auth[:email] = @user.email
 
           post_user