Fake Steam OpenID validation endpoint that can bypass certain libraries and allows the attacker to supply arbitrary identity