Actually SIGN the OpenID API response, and some pep8
Now actually SIGN the API response