Added support for adding additional claims from cookie/incoming principal to outgoing token (default impl adds acr)