Define discrete types of tokens

[coolaj86]

These actions need specific tokens with specific traits:

• Automatic Client Registration
• Session via 3rd Party (i.e. Authorization Redirect login with Facebook)
• Implicit Login (browser-only)
• Resource Owner Password (also Resource Owner Public Key)
• Refresh Token

Update: Much of this work has been done, it just needs to be interpreted for our use case and validated to not break any current or future work:

• OIDC ID Token Spec
• ID Tokens Explained Simply
• http://developer.okta.com/docs/api/resources/oidc

TODO

• jwks_uri
• sub_jwk
• Pairwise Pseudonymous Identifier (PPID) as sub