CIBA acr_values to be optional rather than required in authn request

[Brian Campbell]

Having acr_values be a required parameter of the "Authentication Request" doesn't make makes sense in a more general CIBA use-cases.

Just by way of example, the attached image is meant to be a CIBA Authentication Request that was taking from a prospective banking related profile of CIBA. It doesn't have acr_values so is technically invalid with respect to the CIBA draft as currently written.

[Dave Tonge]

I agree

[Brian Campbell]

Pull request attempting to address this: https://bitbucket.org/openid/mobile/pull-requests/12/change-acr_values-to-be-optional-in-the/diff

[Brian Campbell]

merged the PR