If the user has not yet clicked on "Yes, this is my computer", remove the cert after generating an assertion.

@fmarier - This goes along with what we talked about on the front end. The odd thing is that when re-loading a page that uses .watch, if the user is authenticated to the IdP, a new cert is generated automatically. Is that the desired behavior?