Added id_token validation endpoint