removed OSC_CRYPT_KEY, added alert public and private key to session, added alert signature validation on server side, minor improvements