- made http status code 401 response compliant (WWW-Authenticate) header
- added new conditions authorizationexception to help 401
- updated user sample showing header parameters and header overrides
- removed the 'X-' in front of custom headers 
- added some helpful logging