Add Basic OpenID Connect support including UserInfo endpoint

Yet another moment I wish I had gerrit, and my comments hadn't already been published as soon as I closed them...