providers/logingov.go (1 line):
	- line 23: // TODO (@timothy-spencer): Ideally, the nonce would be in the session state, but the session state


providers/oidc.go (1 line):
	- line 118: // TODO: Try getting email from /userinfo before falling back to Subject


options.go (1 line):
	- line 154: // TODO: Accept a certificate bundle.