access_token sent to openid id-endpoint in header
OAuth2 id endpoint can be set in configfile