OpenID Auth 2.1 should support *only* URL's in the core O...