feat: mfa reset page
- add an OIDC-authenticated page where user can prompt the reset of their MFA
- introduce a unified way of creating and validating JWTs with nonce and expiration time
- unify OIDC and OAuth to read information from the same configuration file
closes PRX-281