Dont use user-supplied data for OpenID verification. Fixes sashka/flask-googleauth#5
Merge pull request #6 from stengaard/master

Prevent a malicious user to bypass the openid auth phase.
Bump a version to 0.4.
Update README.rst
Update README.rst
Merge remote-tracking branch 'upstream/master' into fixes