feat: handle IRMA session results in myirmaserver in HTTP handlers instead of asynchroniously in session handlers

The compared byte slices are not HMACs.

For consistency with the irma server and myirma server and for a potential future
redis implementation.

The two implementation did not return the same values for this parameter under the same
circumstances, and at the invocation false is treated as an error anyway.