Issue92 move client auth to update

WIP for WG discussion. Not finished.
Do you want to split the handshake master secret in two?  I understand that this complicates the resumption master secret calculation a little...