Fix oidc front channel logout (#1194)

Front logout wasn't fully implemented on RP side. Done now. Note that this implementation requires sid for security reasons frontchannel_logout_session_required.

MR based on !320 (merged)