Set OpauthIdentityID session regardless of valid()

This ensures the loginAndRedirect() target can respond appropriately if a
member is valid, but can't log in yet. The specific use case is a member
record which needs to be verified by email confirmation until they can log in.