I'm calling BS on them logging plain text passwords anywhere. The app (client side) is most likely hashing the password w/ the plain text never ending up on the Twitter server side.
For the life of me, the only way I see this as possible is if they hash the password on the database side while they are logging SQL statements. But that would be a nightmare to log the SQL.
I dunno..