Test coverage for server, fix RFC 2617 auth.

Added unit tests for AuthServer.Authenticate using a mock TokenScheme.
Refactored out base TokenScheme.Authenticate implementation into common
function, use in mock & usso.

Fixed bugs in RFC 2617 Authorization: header checking, needed to
canonicalize the header key.

More TokenInfo godocs.