Fix demo with new OIDC conformant mode
Fix demo with new OIDC conformant mode

Since the `groups` are not sent in JWT payload anymore, Doorman returns
a list of principals that only contains the userid.

Ref #55

leplatrem/iam