More work on the app4 auth page. Now shows all request and response headers for each ping. Ping echoes back all received headers so we can be confident they were the real headers after all Angular middleware got involved. New unit test in for server-side ping() method. All unit tests pass.