diff --git a/create.cgi b/create.cgi
index 37b1c60..192556d 100755
--- a/create.cgi
+++ b/create.cgi
@@ -1,6 +1,7 @@
 #!/bin/bash -e
 # vim: set ts=4 sw=4
 # apache_setenv('no-gzip', '1');
+# TODO re-implement in PHP
 exec 2>&1
 cat <<END
 Cache-Control: no-cache
@@ -52,6 +53,7 @@ then
 	echo "<h1 class='alert alert-info'>Attempting to update $id</h1>"
 else
 
+	# TODO: This API is deprecated!
 	if curl -sI http://api.twitter.com/1/users/lookup.xml?screen_name=${id} |
 	grep -q "Status: 404 Not Found"
 	then
diff --git a/oauth.php b/oauth.php
index 0176324..ee3d9bd 100755
--- a/oauth.php
+++ b/oauth.php
@@ -30,7 +30,7 @@ function fetch($bearer_token, $query){
 }
 
 // $bearer_token = get_bearer_token(); // bearer token seems to last
-require("secret.php");
+require("secret.php"); // contains $bearer_token
 print fetch($bearer_token, $urlargs); //  search for the work 'test'
 //invalidate_bearer_token($bearer_token); // invalidate the token
 ?>