That is only required if we'd want our backend to authenticate on behalf of our users. If the app is to authenticate directly it's not needed.