Todo

remove urlencode method in favor of curl's --data-urlencode
add more SAML stuff
add README and sequence diagrams (esp CO)
test against other distros: Linux, BSD Family, SunOS family
offline_access with token and PKCE
export users
push notification sample
./jwt/verify-rs256.sh
ticket API