Handle mutual authentication

Make certain that responses always pass through handle_other() to provide mutual
authentication before returning them to the user.

This fixes #35.

Since this is security related, once we get a few people to verify it doesn't break anything, we should cut a new release.  

Note: It may cause requests which were succeeding to fail if users were requiring mutual authentication but servers weren't providing it.