diff --git a/templates/ethercalc.vhost.erb b/templates/ethercalc.vhost.erb
index 5c587fd..2b048b3 100644
--- a/templates/ethercalc.vhost.erb
+++ b/templates/ethercalc.vhost.erb
@@ -38,20 +38,21 @@
   # MSIE 7 and newer should be able to use keepalive
   BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
 
-  <% if @auth_openid != nil %>
+  <% auth_openid = scope["ethercalc::apache::auth_openid"] %>
+  <% if ! [nil, :undef].include?(auth_openid) %>
   <Location />
       AuthType OpenID
-      AuthName "<%= @auth_openid['banner'] %>"
+      AuthName "<%= auth_openid['banner'] %>"
       AuthOpenIDSecureCookie On
       AuthOpenIDCookieLifespan 3600
       AuthOpenIDTrustRoot https://<%= scope.lookupvar("ethercalc::apache::vhost_name") %>
       AuthOpenIDServerName https://<%= scope.lookupvar("ethercalc::apache::vhost_name") %>
-      AuthOpenIDSingleIdP <%= @auth_openid['singleIdp'] %>
-      AuthOpenIDTrusted <%= @auth_openid['trusted'] %>
-      <% if @auth_openid['any_valid_user'] %>
+      AuthOpenIDSingleIdP <%= auth_openid['singleIdp'] %>
+      AuthOpenIDTrusted <%= auth_openid['trusted'] %>
+      <% if auth_openid['any_valid_user'] %>
       Require valid-user
-      <% elsif !@auth_openid['users'].empty? %>
-      <% @auth_openid['users'].each do |user| -%>
+      <% elsif !auth_openid['users'].empty? %>
+      <% auth_openid['users'].each do |user| -%>
       Require user <%= user %>
       <% end -%>
       <% end %>