v0.17.1

• updated simplewebauthn dependencies to the latest version.
• switched to 'indirect' attestation-type by default, allowing anomimized
  attestations to be used.
• it's now possible to set the value for the cors allow-origin option. by
  default it's enabled, but if cors.alloworigin is supplied, this can be
  overridden.