macaroon: allow many discharge macaroons for a given id

This maps more closely to the original paper's existential qualification.

Also add a test for Verify.