Don't advertise auth mechanisms too early

If "starttls_required: true" is specified for c2s connections,
authentication mechanisms shouldn't be offered before negotiating the
TLS connection.
Merge pull request #325 from weiss/auth-after-tls

Don't advertise authentication mechanisms too early