pass OIDC token to object store