Implement remaining AuthenticationResponse validation steps

[dmitrizagidulin]

In AuthenticationResponse:

• validateAcr()
• validateAccessTokenHash()
• validateAuthorizationCodeHash()

Also implement:

• decryptIDToken()

(Low priority, since these do not apply to Solid auth workflows)