I love simplicity. the reasons you provide for using it are really strong, and I think it's a much superior option to prototyping leveraging oauth 3rd parties

I love simplicity. the reasons you provide for using it are really strong, and I think it's a much superior option to prototyping leveraging oauth 3rd parties (which has tons of downsides). It would be good to have a hard rule as to when you migrate, and what the reasons are (if a project has more than N users, if you store field X which is pretty sensitive, etc..)