Initial commit
Associations implemented
checkid_setup functions for some RPs, but not all yet
Correctly add query params to indirect error
Stateless verification mode
XRDS-based discovery. Provider now works with passport-open, havard/node-openid, etc.)
Prevent replay attacks by only issuing verifications once for any given nonce
Allowed checkid_setup to be POSTed
Fix crash when cookie wasn't in response
Allow checkid_setup to be cancelled
Use session instead of cookies to preserve state. Cookies got too big (>4k) with AX requests.
Basic attribute exchange support
Add to do list