goakerberosprovider: don't assume all errors are auth errors

The kerberos provider was marking all errors as authorization failures resulting in false positives in many situations.

Rely on the GoaIdentityManager to return the correct errors, and act on those that imply a real error occured.

closes #367 (closed)