After trying the available SASL mechs, jabber_auth_handle_failure() now proceeds to regular error handling instead of falling through to a final attempt with no remaining SASL mechs. Also, when removing a SASL mech from the js->sasl_mechs string, remove its preceding space, as well, so we can easily see if the string is empty just by checking its length.