We should update the CONTRIBUTING document to reflect the new structure, as soon as we have a clear method for automated releases. (#920 will probably solve this after some discussions)

I quickly added a PULL_REQUEST_TEMPLATE with a note that most PRs should be done against canary, but it is not a

Percona is quite strict on having primary keys on all tables (and rightly so).
Please add primary keys to all tables, even if it's just an auto-increment.

It's mostly just the following tables:
authentication_logs (could just get a auto-increment primary key added)
identity_verification_tokens (could just set the token as primary key)

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta