lowercase tags, scope, state fields,
add csrf(),
fix openid copying as submitter_openid