Add participant identity to the two non-DAKE return messages, to make sure it's possible to tie them to the request

Change Composite Identity to contain the full public key of the server, instead of just the fingerprint