Add openid_secure_profile_urls option
Give blog owners the option of requiring their users profile URL match one of their claimed OpenID URLs
Honour openid_secure_profile_urls setting when updating profile URL
Check to see if the setting is true before dying with the 'your profile URL ust be one of your claimed OpenIDs' message
Don't automatically update profile URL when adding an OpenID
When a user adds an OpenID don't update the user's profile URL with their new OpenID if openid_secure_profile_urls is not set to true