OpenID Connect initial authentication flow