check 'implicit' and request 'id_token token' for the response_type