working on auth [see #4]; added auto-support for HEAD and OPTIONS on resources [fixed #1]