More work on receiving AES data on the post endpoint

- Add decapsulate method to the Zot facade to keep access to the private site
  key within the class.
- Modify decapsulate in crypto to first decode 'iv' in order to error out with
  KeyError as soon as possible.