c2s: Make allOf and description siblings throughout the PR

The overall mess with allOf will be addressed separately; this PR just
puts $ref under allOf to fix the glaring misuse of $ref objects.

api/client-server/administrative_contact.yaml

@@ -201,10 +201,10 @@ paths:
             type: object
             properties:
               auth:
-                allOf:
-                - description: |-
+                description: |-
                   Additional authentication information for the
                   user-interactive authentication API.
+                allOf:
                 - $ref: "definitions/auth_data.yaml"
               client_secret:
                 type: string

api/client-server/login.yaml

@@ -175,13 +175,12 @@ paths:
                   ID of the logged-in device. Will be the same as the
                   corresponding parameter in the request, if one was specified.
               well_known:
-                allOf:
-                  - type: object
                 description: |-
                   Optional client configuration provided by the server. If present,
                   clients SHOULD use the provided object to reconfigure themselves,
                   optionally validating the URLs within. This object takes the same
                   form as the one returned from .well-known autodiscovery.
+                allOf:
                   - "$ref": "definitions/wellknown/full.yaml"
         400:
           description: |-

api/client-server/registration.yaml

@@ -89,13 +89,13 @@ paths:
             type: object
             properties:
               auth:
-                allOf:
-                - description: |-
+                description: |-
                     Additional authentication information for the
                     user-interactive authentication API. Note that this
                     information is *not* used to define how the registered user
                     should be authenticated, but is instead used to
                     authenticate the ``register`` call itself.
+                allOf:
                 - "$ref": "definitions/auth_data.yaml"
               username:
                 type: string
@@ -347,9 +347,9 @@ paths:
                 description: The new password for the account.
                 example: "ihatebananas"
               auth:
-                allOf:
-                - description: |-
+                description: |-
                     Additional authentication information for the user-interactive authentication API.
+                allOf:
                 - "$ref": "definitions/auth_data.yaml"
             required: ["new_password"]
       responses: