Implement pseudo session based on OpenID nonce The nonce contains the date by definition so this can be used to limit the max age of authentication responses. This commit also contains some cleanups.