... as suggested in issue #6933 * add config option `oauth_verify_peer` * add config option `oauth_identity_fields` * do not mask access token in session data * fix refresh token handling * use a redirect URL without query parameters