Fixed module spoofing so the sender is the spoofed module.
Added core._authed method which returns true if prefix matches master or if prefix is `*`.
Many changes to relay module.