Application.createSsoUrl()
parseSsoResponse

consume a response uri, get the JWT, assert it’s legit, then get the
account
sso request is now using a JWT
irt_jti
id_token is now jwtResponse
parseSsoResponse -> handleSsoResponse, add responseMode param
irt_jti -> irt
fix tests (for last commit)
rename methods from sso to “id site”
more renaming
more renaming
Merge branch 'develop' into sso-url

Conflicts:
	package.json
validate the client api key id of the response jwt
move try/catch into a smaller function
test for token expiration
implement a default nonce store, through the data store

note: this will use the in-memory store by default, which has strong
references - that will need to be addressed before this is production
ready
return an AuthenticationResult from handleIdSiteCallback
refactor, new test
error message refactor
don’t store clientState on auth result

it’s accessible through idSiteResponse, so let’s just do that cuz
we already to it for isNewSub