In production nmode the defaults of several server configuration options should change to be more restrictive. When enabling production mode in a configuration file this would not happen.

Updated noauth description to specifically state that it will cause server to reject authenticated requests.

fix: irma server now shows error message when invalid requestor json is passed using flag or env var

Fixes #38

Fixes #37

feat: Breaking change: support conjunctions of disjunctions of conjunctions when requesting attributes in any of the three supported session types

Instead of requesting several attributes, one can now request several groups of attributes. Within each such group, attributes belonging to the same credential type always come from the same credential instance. This affects all three session types, as in each of them attributes can be disclosed.