www-authenticate handling