exercise certificate/sign and session/destroy
remove bug workaround in certificate/sign

https://github.com/mozilla/fxa-auth-server/issues/315

With the workaround, this works against current
fxa-auth-server (36bf9e1), but without the workaround it breaks.