Use the URL root as trust root (needs flask-openid 1.2.4+)