“shall send User-Agent header that identifies the client, e.g., User-Agent: Intuit/1.2.3 Mint/4.3.1; and” The note says that this is not a security feature. It is dangerous to depend on it. It is just FYI. The "shall" should be changed to "should".
Issue #65 resolved