[twitter-dev] OAuth and screen name

[djMax]

Sorry if this is a noob question, but how can we verify the
screen_name of an OAuth token?  It would seem that having it only out
of band as a query arg means it's subject to spoofing right?  Not sure
how I build secure site login with the core identifier may not match
the token I'm given.