Problem
We came face to face with a wall when we tried to get one of our custom claims (which is the list of groups the user is part of, very useful to differentiate between a marketer and an editor)

Right now, claims received are filtered. This means, for example, any client expecting to receive their custom claims cannot use them.

Fix
Put the claims in the session data. Even better would be to put them in the logged in user data, which mean we could get the claims from any hook or access control function.