Check all certs when authenticating

The module currently only looks at the first element of the certs array.  If there is more than one cert and the first one fails, the user fails authentication and sends an invalid signature error. 

This change looks at all certs and only invalidates the signature if all certs fail.