add instructions; test WWW-Authenticate values