The Twitter demo is meant to be deployed for public consumption, so it needs a way for user accounts to be secured from unauthenticated access.