fix: Authentication core improvements

[daffl]

Some finalizing touches to the authentication core

• Add login, authenticated (backwards compatibility) and logout events to authentication client
• Improve authenticated real-time connection handling
• Add support for setting authentication: true in the authenticate hook so that authentication can be bypassed in nested calls (e.g. user service called by an authentication strategy)

Closes #1246