Support certificate based login with RPC JOSE

[oliwel]

When using RPC with JOSE signatures we have a cryptographic proof about the client holding the key for the given certificate (after checking the signature) so it should be possible to use this certificate in the authentication stack.

This also makes it necessary to fetch the certificate from the backend before the session is finally authenticated.