More refactoring. Actually use the devices public-key for httpsig verification, beginnings of fingerprint validation
Fix and test device fingerprint support