do not send plain password
rex_response::sendResource(): replaced $sendcharset parameter with $contentType
use rex_response::sendResource()
added constant for "304 Not Modified"