Added a check to make sure the user doesn't remove their last OpenID
if they don't also have a password.
Also, put the finishimmediate URL in the publicxrds so that e.g.
Yahoo! doesn't get snippy.
darcs-hash:20080619153231-5ed1f-a5d784ff39b53afdfb0584689188dd78bdb90c41.gz