Add support for ForceAuthn on AuthRequests

Adds support for the optional `ForceAuthn` parameter in `AuthRequest` to indicate that the user should be required to reauthenticate rather than use a previous session.