Using OpenID has limitations, groups are all asked upon login and for people with many many groups this can lead to too much data to be stored in a cookie making it impossible for them to remain logged in.
The fix for this is to ask for a limited list of groups upon login (instead of asking for all the groups), which results in us not being able to check if someone is CLA+1 or not.

Porting to OIDC, groups information are not stored in the cookie, so porting elections to OIDC should fix this issue.