Allow fetching assertion challenge related to existing operation

[petrdvorak]

Currently, combining multiple means of authentication on the web could result in multiple operations being created. We should allow requesting FIDO2 assertion challenge with the provided operation ID, so as to avoid this duplicity.