v3.7.0

Important security fixes

• Properly validate the ID token according to the OIDC specification.
  Use Client.verify_id_token from pyoidc to verify issuer, audience,
  expiry, nonce, acr_values and max_age.
• Upgrade to latest pyoidc version fixing security issues.