Review comment from Steven Jarosz over IM: the handler should construct the Response itself

git-svn-id: https://svn.forgerock.org/openig@181 dbb9e58e-28e6-4ce0-90e8-f11d9605b710