openid is not optional