Fix phantom allowList

Author: BryanJacobs

src/main/java/us/q3q/fido2/FIDO2Applet.java

@@ -1467,7 +1467,7 @@ private void getAssertion(APDU apdu, short lc, short readIdx, short firstCredIdx
         short allowListIdx = -1;
 
         short paramsRead = 2;
-        if (bufferMem[readIdx] == 0x03) { // allowList
+        if (numParams > 2 && bufferMem[readIdx] == 0x03) { // allowList
             readIdx++;
             if (readIdx >= lc) {
                 sendErrorByte(apdu, FIDOConstants.CTAP2_ERR_INVALID_CBOR);