fix hierarchy of authentication modules, make everything extend Auth_Base and implement hook_auth_user() for pluginhost

pluginhost: rework run_hooks() to be shorter, add callback variant; implement exception handling for both