refactoring server auth to be pluggable
also renaming check_read_auth_and_create_client and check_write_auth_and_create_client
since we're no longer creating clients anymore
Merge pull request #1489 from bokeh/feature/pluggable_auth

authentication refactoring