implement OpenID+solution

Since most Wagns currently require invitation requests, for now we want to use OpenID for logins, not for signups (Users will still need a User card)