FIDO U2F: Insecure AppID / FacetID behavior

• Mozilla Bug 1231681 (initial implementation)
• Mozilla Bug 1245527 (hardware rewrite)