Code review comment for lp:~michael.nelson/rnr-server/1564209-return-openid-for-username

This looks OK to me, but I have very little idea what I'm looking at. If this is important / security-vulnerable code we really ought to have someone familiar with the system check this out.