gistfile1.txt

netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead');
$.get("http://twitter.com",
  function(response) {
     var token= response.match(/authenticity_token.*?value="(.*?)"/)[1]
      netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead');
      $.post("http://twitter.com/sessions", {
        "session[authenticity_token]": token,
        "session[username_or_email]": $("#username").val(),
        "session[password]": $("#password").val()
      }, function(html) {
        console.log("twitter homepage", html);
      });
});