diff --git a/go.mod b/go.mod
index f5c7871881ae016b3e7bd732f20d5dbd09a7af43..8ab1c37cbec7d77034ebc46280c1ff6bfea273f8 100644
--- a/go.mod
+++ b/go.mod
@@ -4,11 +4,11 @@ go 1.23.2
 
 require (
 	github.com/coreos/go-oidc/v3 v3.11.0
+	github.com/peterbourgon/ff/v3 v3.4.0
 	golang.org/x/oauth2 v0.21.0
 )
 
 require (
 	github.com/go-jose/go-jose/v4 v4.0.2 // indirect
-	github.com/peterbourgon/ff/v3 v3.4.0 // indirect
 	golang.org/x/crypto v0.25.0 // indirect
 )

diff --git a/main.go b/main.go
index ed13a77ce5b5cf07f0b4f116c5c5df35a6b3f9c9..b88756f357cadcea45a58785e79cb5dc3b3c851a 100644
--- a/main.go
+++ b/main.go
@@ -146,15 +146,15 @@ 		if err := idToken.Claims(&resp.IDTokenClaims); err != nil {
 			http.Error(w, err.Error(), http.StatusInternalServerError)
 			return
 		}
-		data, err := json.MarshalIndent(resp, "", "    ")
-		if err != nil {
+		w.Header().Set("Content-Type", "application/json")
+		enc := json.NewEncoder(w)
+		enc.SetIndent("", "\t")
+		if err := enc.Encode(resp); err != nil {
 			http.Error(w, err.Error(), http.StatusInternalServerError)
-			return
 		}
-		w.Write(data)
 	})
 
 	bind := fmt.Sprintf(":%d", *port)
-	log.Printf("listening on http://localhost" + bind)
+	log.Println("listening on http://localhost" + bind)
 	log.Fatal(http.ListenAndServe(bind, mux))
 }