r @nathanbowers you can blame google for that -- they are the *only* openid provider to use per-domain urls, breaking our scheme.