only disallow openid signups when the param is set, not all of it