OpenID nonce requirement... Use it.
Added xsit forgery stuff