shineauth auth-server. OIDC discovery at /.well-known/openid-configuration