Accept signed userids in FxA state param (bug 1075041)

Not a huge deal but will this execute two SQL `UPDATE`s?