fix incorrect order of args to BIDVerifyAssertion
add a flag for temporarily disabling replay cache
fix bidtool verify

bidtool verify could not verify assertions without a session key because
the context was initialized to always require the replay cache and reauth.
Because context initialization is done before we know which bidtool option
has been selected, we added a flag to BIDVerifyAssertion to temporarily
disable the replay cache