fixup! Add basic OpenID Connect setup