My hunch is that you're setting the private final variables and then twitter.setOAuthConsumer() is trying to do the same. You should only need one or the other. Have you tried commenting out the twitter.setOAuthConsumer() line?
The Docs explain the 'preferred' way to do set these.