OpenID whitelist