HTTPCLIENT-1568: Improve docs on AuthSchemes

* Added RFC references for SPNEGO and Kerberos.
* Cleared fact that NTLM is not the most secure auth scheme
  but SPNEGO/Kerberos.