Open ID fixes

+ Changes back to cookies for portal-side params (due to length limits on the URL)
+ Moves endpoint resolution out of portal

Do *not* pull this yet.  Still requires a pom change.