https://pauljacobson.me/2007/01/04/taking-a-look-at-openid-and-single-sign-ons/