add link to rfc2616-sec3