Allow FI to avoid using the openid-provided email.
Fix an old typo.  We want the *last two* tokens here.