use browserid-verify library

fixes #89