make rollback_auth.js more robust

rollback_auth.js relies on nodes successfully completing rollback before performing auth checks and currently uses awaitReplication() to do so.

Unfortunately, awaitReplication() does not guarantee that a node has rolled back especially in the case of network failures. We should explicitly check the state of the recovering node and make sure it is a secondary before performing these checks.