spf: moved auth_results processing out of switch

so that it's always added to auth_results
previously, when SPF failed, it wasn't added.
When combined with a delay_deny plugin, the connection would ultimately pass without SPF results saved