We should have a unique index on `application.name`. I'd go as far as saying it should be the primary key, but I'd be open to `oauth_id` being that too