This replaces OpenID authentication, which is going away soon, but provides an upgrade path where we can migrate users that already have a Google OpenID setup to the new system transparently.