The auth.getMobileSession method in the 2.0 API, and the scrobble 1.0 API were both sticking points.