PHP-1161: Remove dependecies on Cyrus-SASL from SCRAM-SHA-1

Should 6 be a constant? It's not clear what "more chars from the server" is here. Unlike the `+2`'s below, which I presume are for the size of `","`.