assets handling
response_type=code%20id_token support
move notification to controllers/concerns