It three years later and this issue still exists. I noticed when “Disable directory listing and hide other .txt files.” is checked HMWP adds a “//” in the callback URL which makes the url invalid in the Twitter app.
/wp-content/plugins/wordpress-social-login//hybridauth/index.php/?hauth.done=Twitter
The facebook app accepts the URL but the Twitter app does not.