Make compatible with Microsoft Entra (v1 and v2 tokens) (#821)
* Make the profile picture claim optional
Some identity providers (such as Azure AD) do not provide or support the
picture claim. This patch makes it optional.
* Allow using Microsoft Entra v1 tokens
---------
Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>
