assuming need to manually validate access_token from at_hash carried in id_token. Looking for an on line tool for base64urlencoding.
Here is the validation steps perf
