they completely changed their mind on how to authenticate, which is a relatively big change to the scope but whatever, right?