fixes #2429 - Permanent OpenID secrets storage

Also fallback to form login when Signo fails and log a warning.