Ah! Indeed you are wise.
The correct code should be
$header = array('X-Auth-Service-Provider: https://api.twitter.com/1/account/verify_credentials.json',
'X-Verify-Credentials-Authorization: OAuth realm="http://api.twitter.com/"');
Now at least the error I get back is from Twitter!