Silent Authentication not returning correct idToken augmented in a rule