Add ODIC Back-Channel Logout (#304)

* prevent returning expired sessions

* add issuer to ODIC creds

* get id token in ODIC

* make session signin return session

* working backchannel logout?

* require https for ODIC provider

* handle wellknown not being https

* find session api progress

* fix windows build

* return session token on session

* switch OIDC to #searchSessions

* update pnpm

* switch to using message on error obj

* move odic callback

* fix type errors

* redirect old oidc callback

* make redirect url a URL

* remove scheduled task downloadCleanup

* fix session search for oidc

* fix signin result

* cleanup code

* ignore data dir

* fix lint error

server/api/v1/auth/passkey/finish.post.ts

@@ -98,7 +98,9 @@ export default defineEventHandler(async (h3) => {
     },
   });
 
-  await sessionHandler.signin(h3, mfaMec.userId, true);
+  await sessionHandler.signin(h3, mfaMec.userId, {
+    rememberMe: true,
+  });
   await sessionHandler.mfa(h3, 10);
 
   return {};