Log a meaningful error when browser uses Kerberos5 GSSAPI and not SPNEGO

This can be identified by checking the OID parsed in NegTokenInitDecoder.decode() and verifying that it is the OID for SPNEGO.