Add local-user auth mechanism.

Adds some encoding stuff too.  Configure the challenge file path with the "jboss.sasl.local-user.challenge-path" mechanism property or system property.  If not configured, uses java.io.tmpdir (on well-configured systems, users can only read their own temp files).