Adopt CPA specification

This pull request contains an updated draft which I'd like to propose as Draft 6. It is an interim draft that simply adapts the current (draft 5) specification to include the work of the CPA project as a new auth mechanism.