add option to enable openid (disabled by default)