Login via the API should only use POST
Merge pull request #41 from pypingou/feature/post_api

Login via the API should only use POST
Send 400 when invalid request is sent
Fix not setting openid_request outside of try/catch. Thanks, pingou
Add fixes to NEWS file
Make Persona issuer configurable
Update versions and NEWS file for Arsenic release