The `subject` field used in the JWT causes unknown error when using Microsoft AD / OIDC

Microsoft AD/OIDC will not return the `email` claim even if the email scope is requested.

On [Line 339](https://github.com/aws-samples/lambdaedge-openidconnect-samples/blob/b4131275945f8ab0f6f4433b199950575db7c8fc/src/js/auth.js#L339) the cookie is set with a signed JSON Web Token containing a `subject` field that requires `decodedToken.payload.email`, however when that `email` claim is not present the code 500 errors with no details.

Switching to `decodedToken.payload.unique_name` fixes the problem when using Microsoft AD - however whether this is a breaking change for other providers I don't know.

I would like to see a more dynamic why to get the subject for the JWT, or at least extra documentation pointing out this potential issue.

In my code I have replaced any `decodedToken.payload.email` with `getSubject(decodedToken)` and added the following function to the bottom of my `auth.js` file:

```javascript
// getSubject returns a unique identify suitable for the subject field
function getSubject(decodedToken) {
return decodedToken.payload.email || decodedToken.payload.unique_name;
}
```

src/js/auth.js の 339 行目から開始し、署名付き JWT の subject を作成するときに decodedToken.payload.email がどのように使用されるかを追跡します。issue に示されている利用可能な Microsoft AD/OIDC claims を比較し、email があるプロバイダーとないプロバイダーの動作を定義して検証します。報告された構成でフローが説明のない 500 を返さなくなれば完了です。

索引モデルが issue の本文から書いたものです。