Make auth-server part of the infrastructure layer

Replaces the dedicated auth-server service: auth-server is a low-level, configurable service just one level above PAM and such, so it makes sense to just run it everywhere and have roles configure it on demand. Having it as a service also makes dependencies harder to manage.

Fixes issue #74 (closed).