#aaronpkI have this vague recollection of a discussion about dropping the "me" from the initial redirect, since client's shouldn't be trusting variables in query strings. but I can't find that discussion, and two of the indieauth pages were not updated to reflect that.