After further review, I think this `IS` the best way to do this... as `token id_token` truly is its OWN string identifier.

The only thing I would suggest is that if `id_token` is supplied, that the `OAuth2\Server` class is somehow smart enough to also make `token id_token` the same class.