Client: make agent forwarding per-session
Client: ensure accurate X11 forwarding count
Server: handle auth-agent-req
readme: move agent forwarding to per-channel