Basic OpenID Connect setup

Adds OpenID Connect ID token support
Is this cached per request? If not, there will be issues.