Web Authentication: An API for accessing Scoped Credentials Level 2