XSECURELOCK_SINGLE_AUTH_WINDOW: show only one auth window.

It's then always shown on the screen with the mouse pointer.

Also added a macro SHOW_CURSOR_DURING_AUTH to actually show the pointer
- this is rather useless at the moment as auth helpers cannot receive
mouse events yet anyway. Still a nice proof of concept.