Remove client_id from the OIDC authorization response