A few typographical fixes

Just noticed a few typos while I was reading the spec after it had been mentioned in the W3C Web Security IG.  I figured this was probably was the least work for you to get them fixed.