Log the assertion and trustedIssuers list on verification failure.

Per #59.  We already have pretty good logging about the request details, but let's include the assertion and trustedIssuers in the logs when we get a verification failure, as it will be very helpful for debugging.