more openid testing, looking at SSO User object