Important security fixes
* Properly validate the ID token according to the OIDC specification.
Use Client.verify_id_token from pyoidc to verify issuer, audience,
expiry, nonce, acr_values and max_age.
* Upgrade to latest pyoidc version fixing [security issues](https://github.com/OpenIDC/pyoidc/security/advisories/GHSA-4fjv-pmhg-3rfg).