Expel has walked back its research on the FIDO bypass/downgrade attack