Replaced the userCertificateHash, userCertificate and
userCertificateExpiresAt with the vague concept of user identity string.
At some point that will be populated with the RE-SE handle from the Root
Identity System. A few little and not-so-little bugfixes.