phone attestation fixes
include test pem
refactor attestation routes