id_token must be passed in or set as part of setAccessToken