Fix for token id_token combination as per http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#Combinations
matching the sample authorization request from the same source and section