Add more configuration options for OIDC auth

[devon-mar]

This PR adds the following features to OIDC auth:

• Configurable scope
• Labels from claims
• Configurable username claim

I've made the defaults the old static values so there shouldn't be any incompatibilities.