Improved OR-Composition of Sigma-Protocols