Add POST_BIND events to authentication provider

Adding POST_BIND events allows you to easily do last-minute checks before the user is fully authenticated. For example, if your application requires that a user have a certain role, a POST_BIND event could be used to pass the token to the SecurityContext and verify that the role is present.