Permanent OpenID secrets storage

Also fallback to form login when Signo fails and log a warning.