[COOK-2893] Improve mod_auth_openid recipe with guards and idempotency

Signed-off-by: Seth Vargo <sethvargo@gmail.com>