copied from openid-connect-server-webapp/src/main/webapp