issue #329 - fold am_authed call into session_context to minimize network requests.  update browserid-network.js abstraction to shield higher level code from these changes (higher level code doesn't know/care whether a network function maps onto zero, one, or more wsapi calls)