Custom claims in access token with auth0-spa-js