Add the incredibly useful .editorconfig
corrected tabsize
When responding to AuthNRequest, including an audience element in the response is mandatory as per the spec. Implemented.