CAS-1238 PolicyBasedAuthenticationManager unit tests and policy tweaks.

Unit tests revealed need for tryAll flag on
RequiredHandlerAuthenticationPolicy. Explicitly set tryAll flag to false
on all policies that have it to emphasize "off by default."