The function looks for .httr-oauth in the working directory. If it doesn't find it, it expects an application ID and a secret.
If you want to remove the existing .httr-oauth, set remove_old_oauth to TRUE. By default, it is set to FALSE.
The function launches a browser to allow you to authorize the application