Update the build toolchain
Fix indent
Switch to 3.8-style config and static object access
Use $m->redirect; RT::Interface::Web::Redirect() is meant for internal redirects
Always start with a fresh session when logging in a user
Log and display an error message rather than rudely dying
Remove trailing whitespace
Preserve any submitted OpenID on error
Disable the normal user/pass fields when submitting an OpenID

Otherwise they're submitted with empty values and spurious log messages
may occur.
Require Net::OpenID::Consumer 1.13 for better OpenID 2 support
Guard $csr->user_setup_url with $csr->setup_needed, per the new API

This ensures that we're playing by the rules for Net::OpenID::Consumer
1.030099_006.
Return to a specific OpenID endpoint so we can CSRF whitelist it

This avoids CSRF restrictions when the user is redirected back to us
from the OpenID provider.  Whitelisting a /NoAuth url is not currently
required as all NoAuth paths skip CSRF protection but doing so declares
our intent and provides a modicum of future-proofing should that
assumption change.
Switch from LWPx::ParanoidAgent to LWP::UserAgent::Paranoid

The former does not work correctly on modern LWP + SSL due to it being
unmaintained and essentially a fork of the 2009-era http and https LWP
protocol handlers.

The latter provides the same protection with a cleaner implementation.
Allow a more generous request timeout of 10s instead of the default 5s
Merge branch 'rt4'