The emphasis is on the authenticated session on their end, atleast since Musk locked down X access. It's basically a proxy.