code: public void loadFromRequest(HttpServletRequest request) 
  	{
  		String contentType = request.getContentType();
  		if ( ! "application/xml".equals(contentType) ) {
  			errorMessage = "Content Type must be application/xml";
  			Log.info(errorMessage+"\n"+contentType);
  			return;
  		}
  
  		setAuthHeader(request.getHeader("Authorization"));
  		if ( oauth_body_hash == null ) {
  			errorMessage = "Did not find oauth_body_hash";
  			Log.info(errorMessage+"\n"+header);
  			return;
  		}
  
  		try {
  			Reader in = request.getReader();
  			postBody = readPostBody(in);
  		} catch(Exception e) {
  			errorMessage = "Could not read message body:"+e.getMessage();
  			return;
  		}
  
  		validatePostBody();
  		if (errorMessage != null) return;
  
  		parsePostBody();
  	}
docs: Load but do not check the authentication