To clarify: If I have an application that starts to have a lot of new users signing in to it via OAuth, say thousands of users per hour, then the application would be able to handle that kind of traffic and more, since the GET oauth/authenticate calls are not rate limited. Is that correct or have I missed something? (I’m new to the Twitter API.)