An omniauth strategy for OpenIDConnect