Implement OIDC PKCE

[Tratcher]

This is an incremental security improvement for customers using Code. More people want to use Code to avoid the SameSite issues with FormPost.

[rzontar]

Hi @Tratcher!

I've had a look at how ASP.NET Core does PKCE and backported the implementation. Any feedback would be greatly appreciated.