made HttpAuthentication.Authenticate() virtual
made AuthenticationHandler._authN protected