snarfedi also haven't yet found formal specs for either indieauth or relmeauth. just the pages above. so it seems like aaronpk and Zegnat disagree (maybe?) on whether the indieauth code verification request is supposed to return a me param, but i don't know where to go to determine who's right
