use .isBoom instead of instanceof Boom

For some reason, the existing check was causing a custom authentication plugin to not passing along a status code. I was able to trace it back to this check. 

Despite using Boom to create the error, and the isBoom property being set to true, instanceof Boom was false. 

Changing this check to use .isBoom instead resulted in the expected behavior.