OIDC: `sid` in Front-Channel-Logout request is wrong
In 2.0.16, front Channel Logout request send the following:
build_urlencoded( iss => $self->iss, sid => $user_id, );
According to OIDC specs, this is a wrong value. It should contain
sid claim sent in ID Token.
Fix depends on #2862 (closed).