add security to OIDC

secure the storage of token