auth plugins should send JSON response

previously they always redirected
BrowserID: don't use an exception on failure
Merge pull request #553 from yesodweb/json-auth-plugins

Json auth plugins