using ttm openid-connect strategy