Move authentication back to strategy. Allow user defined hooks aaf_rc_before_save and after_aaf_rc_authentication