Unnecessary log line
New method and fixed some old.
If auth_time and/or loa is available return even if not specifically asked for.
Capabilities should always be represented as a class instance.
Minor tweaks.