Remove yesod code

Hasn't been included in the build for a while.
Support OpenID hybrid authorization requests

Slightly complicated by the fact that the id_token has to contain
hashes of the authorization code and access token (if used).