updating the API docs to mention that you must SSL if you OAuth