Fix Koschei OpenID auth on staging

roles/koschei/frontend/templates/config-frontend.cfg.j2

@@ -62,6 +62,9 @@ config = {
     },
     "frontend": {
         "auto_tracking": True,
+        "auth": {
+            "user_re": "http://(.+)\\.id{{ env_prefix }}\\.fedoraproject\\.org/",
+        },
         {% if env == 'staging' %}
         # Staging copies for fedmenu
         "fedmenu_url": "https://apps.stg.fedoraproject.org/fedmenu",

roles/koschei/frontend/templates/httpd.conf.j2

@@ -17,10 +17,13 @@
     </Directory>
 
 {% if env == 'staging' %}
-    <Location /login>
+    <Location /koschei/login>
         Require valid-user
         AuthType OpenID
         AuthOpenIDSingleIdP https://{{ koschei_openid_provider }}/
+        AuthOpenIDServerName https://apps{{ env_prefix }}.fedoraproject.org
+        AuthOpenIDTrustRoot https://apps{{ env_prefix }}.fedoraproject.org/koschei/
+        AuthOpenIDSecureCookie on
     </Location>
 {% endif %}
 </VirtualHost>