Dont use user-supplied data for OpenID verification. Fixes sashka/flask-googleauth#5
Merge pull request #6 from stengaard/master

Prevent a malicious user to bypass the openid auth phase.