Don't use node-oauth to build authorize URL.
Improve error handling when parsing ID token.
Implement profile parsing and verify callback.