passive auth and login handlers

[Cantor, Scott E.]

I checked the code, it should work. You're passing back an error in the
form of a message, but there's a separate key in the login context for
passing back an actual exception object. Just set that to a
PassiveAuthenticationException.

-- Scott