Use external OAuth provider with keycloak

[cehbrecht]

In ESGF we want to use Keycloak as OAuth identity provider. Twitcher needs to be extended to be able to validate access tokens generated by keycloak (verify token request ...).