Should there also be a note about authenticated requests and `+setClientID:clientSecret:`?