Remove support for unauthenticated SENDMEs

Since Arti will never need to interoperate with Tor <=0.3.5 again, we can remove support for accepting and processing unauthenticated SENDME messages. This will simplify our code in a few places in tor-proto.