include auth0 access_token in the list of claims
update sample to Auth0-ASPNET-Owin 0.5.0