Security fix to support Google's Federated Login API
Fix problem where mode is not checkid_setup or checkid_immediate and using OpenID2