A new POST API to receive ID tokens from Google. When an ID token is received the the API must validate it and lookup/create an associated Arc XP Identity account and return a HTTP 303 (redirect) response that can be intercepted by a mobile app which can use another (new) API for retrieving the Arc XP access and refresh tokens.