Added note explaining that token and client_id parameters must not be options for delegation