OpenID Connect Session Management - comments