Make AuthSession final and add a delegate protocol to intercept and provide custom errors

[mdmathias]

This change is motivated by the fact that Swift classes (even @objc and NSObject subclasses) cannot themselves be subclassed in Objective-C. Thus, we need to provide some mechanism for GSI-iOS to receive, and potentially modify, errors before they are delivered to the clients. The delegate protocol added here is that solution.