Offer an in-band agent auth method

[danielkov]

authenticate and auth/login always return invalid_params; only terminal auth methods are advertised. Offer an agent auth method where a provider supports in-band credential exchange.

Part of #146.