This is used for apps which are using OpenID to login but still need to be able to verify the users password or app password