Known Vulnerabilities in OpenId Connect Authentication 1.6