PR #1: The resource server's half of OpenID Connect