Allow accessing any resource using access token

The idea is to provide a OIDC provider side authenticator that check if the request contains an access token to automatically authenticate the corresponding user. If none can be found fallback on a configured authenticator.

This would allow external applications to access REST resource with an access token instead of user/password for example which is a lot safer.