[gocbcore] Auth mechanisms are not correctly iterated

We typically have a list of auth mechanisms to attempt to authenticate with, when the server rejects a mechanism we should compare the list of mechanisms supported against the list we have and then pick the next mechanism from that. However, once the server rejects an auth mechanism we fail the bootstrap attempt.