Change openID authentication to a filter. Currently authentication works only once as we don't store session information and repeated try to authenticate will use the same nonce.