Add hook for authentication failure

OnAuthenticationListener now has two hookes, for success and failure or
authentication, which are now invoked by the AppEngineAuthenticator.