Fixes #19 properly - static list of always trusted OpenID urls.