add Authentication-Results header (RFC 5451)

this partially implements Issue #406 (still needs a method for plugins to call, to append auth results to connection.notes.authentication_results).