Implement OpenID access token based authentication

Currently, it is only posisble to authenticate using OpenID Connect pasword-based grant types. However, services may already have an OpenID access token that can be exchanged directly with the Keystone endpoint in order to obtain a Keystone token. Without this new auth plugin, those services need to make API calls directly in order to get the final Keystone token.