An omniauth strategy for openid connect