added documentation for server-side stamp authentication

Return false instead of calling next() to bypass the client-side stamp authentication procedures.