Move HttpAuthenticator#isAuthenticated method to AuthenticationExchange class

When a private method is only invoked by an inner class, there’s no reason not to move it into that class. It will still have the same access to the outer class' members, but the outer class will be clearer and less cluttered.