add size check of authorized principal

The ngx_str*cmp family of functions are thin wrappers around their str*cmp
equivalents.  Thus, I am doing the same style check I would do with those.

Removes the need for sys/param.h.  Also updated the license file to have
the same set of authors.