Make auth interfaces more flexible

Allow AuthenticationNeeded/GrantNeeded interfaces to decide whether to handle the request, or let the default error response be written by the oauth server
Why is this different than an osinserver.ErrorHandler?  Multiples possible as opposed to a single one?