resolver identifies claims by uid: claims-service/uid/[csid]/[cid]