AX attributes not returned to trusted, auto-approve RP

[James Tait]

Where the RP is trusted in SSO and configured to auto-authorise, the AX attributes don't get passed back to the RP.

[James Tait (jamestait)]

It looks like there's a missing _add_ax (or two) in _handle_user_response, when called from _process_openid_request and the RP is trusted and the request is immediate, or when the user is already authenticated with SSO.

[James Tait (jamestait)]

I managed to get a failing test for this problem and apply a fix for that - the missing _add_ax calls solved the problem and tests passed. But in combination with the LP teams extension, the redirect URL is too long, so the default mechanism for handling this kicks in and an auto-submitting form is supposed to be returned.

Unfortunately, what I'm seeing in the browser is the form HTML rendered as a plain text document - the AX attributes are present, but the content type is wrong and the response is not a complete HTML document with the auto-submit Javascript. I have a failing test for this as well, but no fix yet.