Add edX OAuth2 provider with OpenID Connect support

Not critical, but it would be nice to know *why* these are excluded from the token (I assume it's because they are too big)