* authenticate: add support for webauthn * remove rfc4648 library due to missing LICENSE * fix test * put state function in separate function