ForceAuthn and defaultAuthMethod

Change behavior when forceAuthn is requested to reset the principal and
force all handling to occur again.
Use configured defaultAuthenticationMethod when SP does not request a
value