Update CONTRIBUTING.md

Update CONTRIBUTING.md to include more detail how rules around contributing code and code reviews.
Update CONTRIBUTING.md
initial sketch of preVerifiedTokens
added a test for invalid preverifytoken, default config to no secret