session.go

- fixed up the access vs id token from providers, will default to using the id token, but will attempt to use the access token
- fixed up additional issues
- updated the README to reflect the changes
- added a google openid example to the readme
- added a fix to the discovery url to remove the .well_known suffix