Review and changes from Jocelyn Fiat

probably, the code should set the Authentication Info header right away here, maybe even in get_auth_username

And get_auth_username  should probably be renamed   process_authentication or similar, since it does more than just getting the `auth_username'