I am a bit unclear about how we really want to handle user registration and linking external accounts / oauth tokens. In particular how much user management we want in the core "open-source" project (in particular, self-registration).

E.g. now, any non-registered user can log in via github Oauth, and have a user account created with no email.

Up for a discussion elsewhere.