https://tools.ietf.org/html/rfc7636

Following cases are implemented for now:
* Refresh token changes, only allowed for once
* Refresh token does not change, allowed multiple times
* Claims missing, UserInfo existant
* Claims existant and signed (Signature is checked), UserInfo existant

And accordingliy make the error message fitting for the chosen account.

Add endpoints with user lookup by generic and attribute store

choosing the minimum uid number