fixes #2429 - change OpenID storage to be permanent

Also fallback to form login when Signo fails and log a warning.
Make Signo SSO backend unavailable for API.