Laura Fitzgerald Yeap, it still valid that is why it still open. It is on hold because oAuth/security is not a priority on client side for now.