implement support for verifying assertions issued by primaries for the purpose of logging into browserid