Since the same API key is always used, it'd be great if the person had to give their name when rejecting the story so I know who to follow up with. Alternately maybe we can present them with a drop down of the members on the project? Either way, just concat that value to the beginning or end of the rejection message.
I agree with this need. Or allow them to login to pivotal and pull that user's auth token or something.