Accept signed userids in FxA state param (bug 1075041)

Only if preverified, and we handle that above.