Reject OpenID XML responses with a doctype

To prevent potential malicious executions