Clarify how authentication works for /applications.
Merge pull request #260 from github/clarify-check-authorization-endpoint

Clarify how authentication works for /applications