steam does not require Validate OpenID Authentication

[mavrick]

looking over the code for passport-steam they simply check if the openid.op_endpoint matches config.authorizationURL

if (query['openid.op_endpoint'] !== config.authorizationURL) {
  const error = createError({
    statusCode: 401,
    message: 'Claimed identity is invalid.',
  });
  if (!onError) throw error;
  return onError(event, error);
}

trying to run this in production with a https:// endpoint the call to https://steamcommunity.com/openid/login fails with 403

[atinux]

Pull request welcome if you find a way to improve the Steam support