returnJSONError on _OpenIDConnect.pm should return a 400 status not a 200
At the moment when returning error in openid connect (returnJSONError ), the system returns 400 status, instead of 200.
Here is a patch to return the 400 status (was marked as todo in the code)