Tests for omitted credential ID in a CTAP 2.0 authenticator response