Don't bother with id_token in auth flow

Seems to cause weird problems in Auth0s inscrutable SDK, and we don't
need it, so just drop it entirely.

Author: pimterry

api/src/auth0.ts

@@ -85,7 +85,7 @@ export const loginWithPasswordlessCode = withRetries('loginPWL', async (email: s
     (await authClient.passwordless.loginWithEmail({
         email: email,
         code: code,
-        scope: 'openid email offline_access app_metadata'
+        scope: 'email offline_access app_metadata'
     })).data,
     {
         shouldThrow: (e) => {

api/test/auth.spec.ts

@@ -7,7 +7,7 @@ import { AUTH0_PORT, auth0Server, startServer } from "./test-util";
 const TOKEN_RESPONSE = {
     "access_token": "at",
     "refresh_token": "rt",
-    "scope": "openid email offline_access",
+    "scope": "email offline_access",
     "expires_in": 86400,
     "token_type": "Bearer"
 };