Use skip_info to avoid /userinfo call

[hzalaz]

Instead of calling /userinfo, decode the id_token (if openid was included as the scope)

[cocojoe]

@hzalaz You could have wrote the PR 😆 @joshcanhelp Up to you on this one, not a priority though. Would need to ensure it has full id token validation as well.

[joshcanhelp]

Adding this to our backlog.