Fix two issues with CTAP2/FIDO2:
- RpID in request is checked to match credential for non-RK
- Up=false option in get_assertion allows assertion to pass without UP
#308
#306
#305
Thanks to @KenTaylorPhoenix for reporting. Also thanks to @merlokk for another NFC improvement #301.
