* webauthn: require session when accessing /.pomerium/webauthn * remove dead code * remove unusued PomeriumDomains field