Externalize openid config, add aol and verisign as openid providers.