Remove auth handler

Remove auth handler in favor of handling auth in stream handler.  Having a separate auth handler is no longer necessary since replies can be sent on the stream object and have no need to be sent directly by the stream frame handler.  This also allows greater flexibility in how rejected auth is handled, whether through a stream reset or sending an http status code in the reply frame.