exposed ClaimsClient
split ClaimsClient and Resolver into two pieces, exposing ClaimsClient externally