Update to v0.8.60.

* Implements the proposed eTLD+1 check on appIds
* Tolerate lack of HID init message, as per standard
* Rename challenge to challengeHash in enroll helper messages, to match documentation.
* Some refactoring/cleanups
Nit: this comment, and the next line, aren't relevant to this extension. I'll leave it alone for ease of merge.