User verification in assertionResult does not follow official webauthn spec

[C0x41lch0x41]

The official webauthn spec says that UV flag should be set only if userVerification is set to required: See point 16 here.

However the lib sets the UV flag not matter what for the first factor here

[JamesCullum]

A merge request would be great 👍