clearly show that 3 legged oauth is not required (bug 866176)