Florian Brand explains how APIs post without full account credentials · Digg