Require authentication before forwarding agent commands

[3em0]

Summary

• require Master websocket sessions to be authenticated before forwarding commands to Agent nodes
• route unauthenticated Agent-targeted commands through the existing authentication handler instead of proxying them

Fixes #34

Testing

• git diff --check
• go test ./... was not run successfully because go is not installed in this environment