BrowserID GSS-API mechanism