if you send openid params to /ws it will use them instead of the token/email params