Added support for acr_values parameter in authorize request and pass values on in SignInMessage (see #348)