Move authentication handlers into a new module

[psimonyi]

It's a lot of code for requestHandlers that could be abstracted out.