We cannot allow users to test openid login while the gateway has domain name "esg.ucar.edu", because their openid will change.
Therefore we should probably:
o Disable openid login until DN is transferred
o Change all openids in the database to start with https://www.earthsystemgrid.org/
o Include www.earthsystemgrid.org in all trustores
o Check with PCMDI wether they plan on changing their gateway domain name from the current http://pcmdi3.llnl.gov/esgcet/