lib/extend_builtins.rb and no we don't skip signatures (isn't that the whole point of these changes?)
Doorkeeper controllers are used when you manage apps and authorize them to look at your info