Add required box_version to Vagrantfile
Use openid and id_token in python-flask client
Add CSRF protection using state to python-flask
Front the python-flask example client in README