Fix the login loop of death.

* If there is an error verifying the assertion, send the user to the /force-logout page, where navigator.id.logout is called.

fixes #80