Once it's merged and deployed, the tokens will only be enabled
once
users have proven that their app works, so it should cut down on those
"I'm locked out" requests.
OK, it's merged and deployed on staging. If you folks want to test it
out, it's at
https://accounts.stg.fedoraproject.org/
Please tell me if it doesn't work for you.
Thanks!
A.