Still needs a postgresql-daemon somewhere.

This allows to add webauthn as a second factor and integrates the
register and authentication flows for webauthn credentials.

Further smaller changes for better integration are part of that
commit as well.