Add Basic OpenID Connect support including UserInfo endpoint

Yeah, I can rename the new `claims` to `id_token_claims`. Does that make more sense?