Auth also requires client GUID. Which isn't much of a secret bundled with the app. ;)

//