remove redundant Authentication from class names
assuming html forms broke top level sqrl response
provide unlock signature
expose unlock signature checking