Fix detection of Auth mechanisms.

 <mechanisms> is not neccessarily a child of <auth> (http://xmpp.org/rfcs/rfc3920.html#tls)

Pre-Binding did not reliably work for me with Prosody 0.9.4.