Login via OpenID

Front-end part the of OpenID stuffs. :D
That was just a temporary measure, so I *think* we could probably drop external at this point.  Not sure if it's useful on the VMs.