Secure OpenID login using HTTPS rather than mere HTTP digest auth.