Removes id_token references from JS and modifies backend to support it

Reviewed in https://codereview.appspot.com/14529047/