This adds two separate config flags both for the issuer and client id,
while the username claim and prefix are hardcoded. If configuration
flags are not specified, no OIDC authentication is enabled.