SSO Spike using IdentityServer.v3