STARTTLS document nits

EHLO and NOOP should be added to the set of commands which can not
result in a 505/5.7.0 error.

In the SMTP AUTH draft, I reused the 505 response, giving it the name
"Authentication required".  I want to check that this is OK with this
list.