a small, standalone openid verifier