use Hash rather than _HashContext

This change lets us remove the AlreadyFinalized checks from the backend
signature and verification contexts
more _ctx required
add some complexity back to handle 0.9.8 annoyances
Merge pull request #1092 from reaperhulk/hash-ctx-switch

use Hash rather than _HashContext in RSA/DSA