download OpenIdConfiguration instead of hardcoded keys