"The pushApplicationId and masterSecret params help the UnifiedPush server to identify the particular Push Application installation"
==> it's really just a normal (HTTP BASIC based) authentication against the Push Application.

Let's also not use the word "Push Application installation"