Added end_session_endpoint and updated rp1 and rp2.

Added end_session_endpoint and updated rp1 and rp2. 

id_token is expected and verified only if the client uses id_token.