fn claims(id_token: &str) -> Option<(String, String)>Expand description
What the ID token says, from its payload (it came straight from
Microsoft’s token endpoint over TLS; Sioul only reads who signed in, and
the server’s own login decides): tid, and the address.