working openid authentication with redirects. christ.