Make WebAuthn appid optional
Appid is an optional webauthn mechanism that we use by default to allow old U2F registrations to continue working after migrating to webauthn
However, appid doesn't work in some particular situations, such as running LLNG on http://localhost (for dev)
We should allow users to disable appid when they don't need it, or if they want to use a dev environment on localhost