First stab at validating id_token