Send back headers, and include authentication support