Fixed random failures in test_security_plain and _curve

* ZAP handler thread was not getting time to start up
* Code now creates and binds handler socket in parent thread and
  passes the socket to the zap_handler, so this always gets the
  authentication requests.
Merge pull request #663 from hintjens/master

Fixed random failures in test_security_plain and _curve