Pull in webathena.js and gss.js from webathena
Add a keytab config option
Stub code for actually doing GSS auth
Return JSON for /api/v1/auth too

This way we can return a response token.
Handle no response token too

Client might not have requested mutual authentication.