I think he's talking about how you login at a browser page rather than say an Android native form field. /u/RavAshi this is a Reddit oauth convention which let's you login without giving the app your password. That makes less sense in our setup, but it's still a good little security separation. Maybe there's a better way to do it, pull requests accepted :)