Basic OpenID Connect setup

Adds OpenID Connect ID token support
Why not just `'email'`?