Add Basic OpenID Connect support including UserInfo endpoint

Should we just disable this globally? It's sprinkled throughout the code.