Support Facebook OIDC token flow about hwioauthbundle

[stloyd]

Sounds good for me to include this setting in FB resource owner, feel free to send PR.

[Seb33300]

I did some more research on this today:

• Limited Login is only used in some specific scenarios, for instance on iOS if the user click on "Ask App Not to Track" on the consent popup.
• I am still not sure if limited login can be use in web context (looks like it's even not available on Android)
• Limited login is only supported by the OIDC token flow.

The current FacebookResourceOwner implementation is done with the Login flow.

I dont know if facebook has plan to deprecate that login flow in favor of the new OIDC token flow.
But we may need to migrate to OIDC token flow at some point.

[Seb33300]

I did some additional test, and it looks like the OIDC token flow is very similar to the classic login flow.

We only need to set the scope param to openid and this can be done in the config file.
From my test, I can use it with the current flow without adding the other required parameters mentioned in the documentation.

Looks like the required parameters are required only if we change the response_type, for instance with id_token to get a JWT.