simplify verifier a bit to make it simpler to use either off the same domain as browserid.org OR on its own domain.