Check issued at time in id_token