Allow response type of "id_token token" for form_post response mode

Before that we only allowed id_token