display link to duplicated jobs in results and running pages
don't read openid secret from config. compute it on startup
set proper header to mojo detects https