If you want to support legacy auth, then you could handle that in the request_token method, but this would be a good time to drop support for it.