[SQUASHME] change: JUST log to debug.log and don't add UI interactions

- re-allows cert errors and treat such payment requests as valid
  unauthenticated payment requests