allow a single middleware to work with the callback by using auth0 in the correlation cookie
expose provider on the AddAuth0 extension to be able to plug in the pipeline
add picture claim