Ensure commitments to coefficients are in the right subgroup

[dtebbs]

In round 1, check that received points are on the BabuJubjub curve, and that they are in the subgroup (i.e. $r_B \cdot C_{i,k} = 0_{\mathbb G}$ for $k=0,\ldots,t-1$).