Automatically call the /webauthn_begin_assertion endpoint to start the challenge/response process if there is only one security key active

Move away from the hashed challenge + user + password to the recommended NIST PBKDF2 HMAC-SHA512 function