Return additional claims from user info endpoint in OpenID Connect rather than in an access token