Improved usability of OIDC providers on forced refresh login flows

This change causes forced refresh login flows to omit irrelevant OIDC providers in generated forms in order to list only strategies/providers that are valid for the identity and can be used to successfully re-authenticate.