API complexity

Having a very brief look at the examples of using Web Auth in this
Microsoft announcement reminds me of our obligation to ensure our API is
simple (but still flexible and extensible).

https://blogs.windows.com/msedgedev/2016/04/12/a-world-without-passwords-windows-hello-in-microsoft-edge/

If the bar for API complexity is set by this API I'm confident we are doing
okay