OAuth2 Filter - ID Token Cookie Too Large

[joberdick]

Title: It's possible ID token is too large for cookie

Description:
Our IDP can return large amounts of data in ID tokens. This is causing SSO to fail with the filter as the ID token is never present

Can we either breakup the cookies to support larger payloads, or allow an option to exclude the ID token from the cookies?

Repro steps:

1. Setup Filter for SSO
2. Add over 4KB of payload to the ID token on the token issuer
3. Login with the filter and observe failure

[adisuissa]

cc @derekargueta @mattklein123 as codeowners

[derekargueta]

Making IdToken configurably opt-out sounds reasonable and simple