Assert for valid value choice in OpenID/SReg.

This is to avoid people trying to hack in a different e-mail than ones
listed in LDAP.