OpenID Connect

Uses some OpenID Connect features (including token signing)