Comment 8 for bug 449708

Here's how it's supposed to work. Will create a testcase for it and test again today.

<achuni> - For untrusted RPs (if you don't have an OpenIDRPConfig for /consumer) you'll get the "We don't talk to your RP, sorry" screen, with just a Cancel button on it
<achuni> - For trusted RPs but that don't have auto_authorize enabled, it will always return False (ie, the user is not logged in, regardless of if the user actually is logged in)
<achuni> - For trusted RPs with auto_authorize, it should behave as described in the bug