I use an Android WebView for Twitter OAuth: Twitter asks the user to log in and authorize the application, I retrieve the access token and persist it in my application.
For not saving passwords:
WebView webview = new WebView(this);
WebSettings mWebSettings = webview.getSettings();
mWebSettings.setSavePassword(false);
mWebSettings.setSaveFormData(false);
For cookies:
CookieManager cookieManager = CookieManager.getInstance();
cookieManager.setAcceptCookie(false);
I am not very sure for the cookies implementation.