Clarify how authentication works for /applications

The previous explanation for how this worked left a little to be desired. This makes it much clearer how authentication works with this particular endpoint.