hybrid service instantiates inner members, addresses #508
made userinfo fetching optional, addresses #510
Created hybrid issuer service, addresses #509