fixed signed comparison in IS_BROWSERID_ERROR
tok_type is never -1
add gss_{acquire,add}_cred_from