Fixed AuthTests (integration test)
Corrected behavior of [RequiredRole] and [RequiredPermission]

Both didn't return a Www-authenticate header if authentication (not
authorization!) failed. (solution: inherit from [Authenticate]

Added small tweak to [Authenticate] to fully respect
AuthenticateAttribute.Provider.
Fixed validation integration test