As far as the conditional on line 94....  

If 
   the client has specifically requested a application bearer token request (by passing in the :app_auth option)
   or
   there is no access token present for the client (fallback to using a bearer token)