Security
Session assurance and WebAuthn credentials
Fetching session assurance, CSRF, and enrolled credentials.