Authen::SASL fixes

Pass debug option to Authen::SASL. Without this option there is no way to understand GSSAPI errors;
Check for empty string from Authen::SASL::*->client_step when GSSAPI fails ("Miscellaneous failure (see text);No credentials cache file found; output token sz:")