Allow custom auth providers by exposing the AuthenticationBuilder

[HeyJoel]

In reference to #199, at a basic level we should be able to allow additional auth providers so that developers can wire up non-cookie auth senarios how they please.