Formal Verification of the W3C Web Authentication Protocol