implement idp and RP extended claim extraction, use this to test support for extensions like unverified-email
explicitly test extended idp claims