Send the hubs on every request made to the server so auth works

Addresses #2145. Today we don't pass up the hubs on every request (negotiate, sends, abort) so the authorization step is skipped on those requests. The effect is that you can end up negotiating unauthorized and then connecting with with the hubs and failing authentication because the user has changed. 

The fix is the send the list of hubs (connectionData) on every request. 

Will do the js client in another PR