Fix OpenID denial of service: introduce LIGHTOPENID_TIMEOUT
Adding documentation on LIGHTOPENID_TIMEOUT
Adding validate_error for more informative failure messages

Particularly useful for showing to users or debugging failiing OpenID
requests