simplify the auth code:

- just add an invalidate() method, no refresh= argument to authenticate_tenant
- add an ICachingAuthenticator interface and declare that the CachingAuthenticator implements it.