hi - i think this is more an issue with our documentation.
if you were to attempt to get my favorites stream, for example, you can do
it without authentication because i'm a public user. if you attempt to get
a protected user, you would need to authenticate to confirm that you have
permission to
I should add that the RSS is completely open for this on all users
pages, so it stands to good reason that this API method should remain
open (obviously with the exception of protected user accounts).
Remy / @rem
