Don't enable OpenID by default for security reasons

There must be a way to limit the authorized providers to prevent someone
from impersonating someone else using their email address.