Improve documentation for OpenIdConnectServerOptions.AllowInsecureHttp and fix inconsistent casing
Rename IdTokenLifetime to IdentityTokenLifetime
Integrate changes made to upstream