rest sso: expose puavo id as id on jwt