2014-07-04 UTC
# 
finchd aaronpk: it does. I think that skipping the user_id and profile_id is probably best - it gives away far less of your db interals for explotation. I'm no security researcher -- I had to go look up OTR to find the word I was looking for ;)